1. Data Controller

Syntomic™ is operated by QuestDome Srl. For any data-related inquiries, please contact:

Email: support@syntomic.io

2. Data We Collect

We collect and process the following categories of personal data:

• Analytics Data (via Google Analytics 4): Anonymized IP address, device type, browser information, pages visited, and interaction events. This data is collected only after you provide consent.
• Payment Data: Processed by our payment provider, LemonSqueezy. We do not store your credit card information. LemonSqueezy handles all payment processing in accordance with PCI-DSS standards.
• Contact Information: If you contact us via email, we store your email address and message content to respond to your inquiry.

3. Purpose of Processing

We process your data for the following purposes:

• Analytics: To understand how visitors interact with our website and improve user experience.
• Order Fulfillment: To deliver the purchased digital product to you.
• Customer Support: To respond to your inquiries and provide assistance.

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

• Consent: For analytics cookies (you can withdraw consent at any time via the cookie settings).
• Contractual Necessity: For processing purchases and delivering products.
• Legitimate Interest: For improving our services and responding to inquiries.

5. Third-Party Services

We use the following third-party services that may process your data:

• Google Analytics 4: For website analytics. Google Privacy Policy
• LemonSqueezy: For payment processing and order management. LemonSqueezy Privacy Policy
• Cookiebot: For cookie consent management. Cookiebot Privacy Policy

6. Data Retention

• Analytics Data: Retained for 14 months (Google Analytics default).
• Purchase Records: Retained as required by applicable tax and accounting laws.
• Support Correspondence: Retained until 2 years after last contact, unless required longer by law.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for analytics at any time via the cookie banner.

To exercise any of these rights, contact us at support@syntomic.io.

8. Cookies

We use cookies to enhance your experience. You can manage your preferences via our cookie consent banner. For detailed information, click the "Cookie Settings" link in the footer.

9. International Data Transfers

Your data may be transferred to and processed in the United States (Google Analytics, LemonSqueezy). These transfers are protected by Standard Contractual Clauses approved by the European Commission.

10. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. In Romania, this is the ANSPDCP.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date.